Cyber security - Risk Management

Dear Candidates,

We are hiring Cybersecurity professionals for our Investment banking client in Mumbai.

Experience : 3-5 years

Responsibilities

Direct Responsibilities

1. Deep familiarity with the CIS Controls and CIS Benchmarks for routers, switches, firewalls, IDS/IPS, load balancers, VPN concentrators, etc.

2. Ability to map benchmark recommendations to devicespecific configuration commands.

3. Experience producing hardening guides and remediation plans

4. Linux (RHEL, CentOS, Ubuntu) and Windows Server hardening per CIS Benchmarks.

5. Understanding of SELinux/AppArmor, sysctl, group policies, secure baselines.

6. Handson use of MicroFocus Automation, Qualys, Rapid7 InsightVM for benchmark compliance checks.

7. Ability to ingest scan results, prioritize findings and produce remediation tickets.

8. Python (paramiko/Netmiko/NAPALM), PowerShell, Bash for bulk configuration review and remediation.

9. Experience with Ansible, Chef, or Puppet for applying hardening templates.

Contributing Responsibilities

1. Contribute to the Permanent Control framework for implementation of policies and procedures in day-to-day business activities, such as Control Plan

2. Contribute to Internal Audit response activities.

3. Comply with regulatory requirements and internal guidelines.

4. Contribute to improvement of tools used by Production Security to follow-up on the Security Incidents

Technical & Behavioral Competencies

• OWASP methodologies application is mandatory.
• 2 4-year experience in IT Security minimum
• University degree, preferably in Computer Science with spec. in IT Security
• Exceptional communication and advocacy skills, both verbal and written, with the ability to express complex technical issues in an easily understood manner.
• Curious and highly implicated in IT Security
• Team player
• Experience working in an international and complex financial environment, dealing with both business constraints and IT users across countries.
• Experience in a multi-cultural environment is appreciated.
• CEH or Any Security certifications are appreciated.
• Experience in Development languages and scripting is appreciated. Specific Qualifications:

Skills Referential (Required knowledge, skills and abilities)

Technical Skills:

• Vulnerability Management
• Network Security
• Vulnerability Assessment
• Scripting Knowledge

Behavioral Skills:

• Ability to manage / facilitate a meeting, seminar, committee, training
• Business communication
• Stakeholder handling
• Ability to understand, explain and support change

Education Level: Bachelor’s degree or equivalent

Location: Mumbai

If anyone is interested , please share your resumes to [email removed]